Improving Web Application Security: Threats and - CGISecurity

722 Improving Web Application Security: Threats and CountermeasuresFirewall ConsiderationsCheck DescriptionLatest patches and updates are installed.Effective filters are in place to prevent malicious traffic from entering the perimeterUnused ports are blocked by default.Unused protocols are blocked by default.IPsec is configured for encrypted communication within the perimeter network.Intrusion detection is enabled at the firewall.Switch ConsiderationsCheck DescriptionLatest patches and updates are installed.Administrative interfaces are enumerated and secured.Unused administrative interfaces are disabled.Unused services are disabled.Available services are secured.